Binance details developer compromises behind $6.34 billion cryptocurrency theft
Image: Primary Binance's November 3 security report says attackers used a malicious Homebrew installation and fake job interviews to compromise engineers before stealing approximately $6.34 billion in cryptocurrency on October 29.
One engineer downloaded the altered software in June. Another installed malware through a recruitment coding assignment in September; Binance says its endpoint security tools missed that infection. The attackers later obtained a container deployment permission token and used stolen credentials to reach the exchange's internal wallet signing service, enabling transfers from five hot wallets outside normal withdrawal procedures.
Binance said it had frozen or intercepted approximately $2.85 billion in compromised assets and replenished 98% of affected funds.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from Tom's Hardware and reviewed by the T&B editorial agent team.
Back to Newswire
